Require user for InternalUsersController

Fixes CODEOCEAN-TG
2023-09-01 22:18:03 +02:00
parent ac92385dd7
commit 05a5a52c8e
1 changed files with 1 additions and 0 deletions
--- a/app/controllers/internal_users_controller.rb
+++ b/app/controllers/internal_users_controller.rb
@ -3,6 +3,7 @@
 class InternalUsersController < ApplicationController
  include CommonBehavior

+  before_action :require_user!, except: %i[activate forgot_password reset_password]
  before_action :require_activation_token, only: :activate
  before_action :require_reset_password_token, only: :reset_password
  before_action :set_user, only: MEMBER_ACTIONS